CVE Intelligence

WebAppick vulnerabilities

🔔 Create alert RSS

Published CVEs affecting WebAppick products: 3 record(s), with severity, exploitation and fixes.

CTX Feed 2Challan 1

Exploited only (KEV) →

CVE-2026-39765 High · 7.2 CWE-266 Oct 6, 2026
WordPress Challan plugin <= 3.7.88 - Privilege Escalation vulnerability
Shop Manager Privilege Escalation in Challan <= 3.7.88 versions.
CVE-2026-39434 High · 7.2 CWE-502 Jun 15, 2026
WordPress CTX Feed plugin <= 6.6.26 - PHP Object Injection vulnerability
Shop manager PHP Object Injection in CTX Feed <= 6.6.26 versions.
CVE-2026-22461 Medium · 5.3 CWE-862 Jan 22, 2026
WordPress CTX Feed plugin <= 6.6.18 - Broken Access Control vulnerability
Missing Authorization vulnerability in WebAppick CTX Feed webappick-product-feed-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CTX Feed: from n/a through <= 6.6.18.